Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft
File:                     saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json)
Hash identifier:          Zwz4aDQpKQzSKb7JKTTv07WqC+/ED9OlyxIf3FyTVc8=
Subject key identifier:   5F:7E:94:5F:92:88:C1:40:22:5E:44:84:69:D4:2E:68:8B:19:32:22
Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF
Certificate issuer:       /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF
Certificate serial:       3561
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft
Manifest number:          3552
Signing time:             Fri 12 Jun 2026 14:34:33 +0000
Manifest this update:     Fri 12 Jun 2026 14:34:32 +0000
Manifest next update:     Fri 19 Jun 2026 14:34:32 +0000
Files and hashes:         1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: gus1M6b3oBB3Jq5bvo3nRrdYxHeNNs7YfO8K91NXFwE=)
                          2: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: a8UAQgdr5YefPf6e/FxqB3qO2kRWk0And4FOBUzigKo=)
                          3: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: Z7MnSNSHBqpmgGDUQHMm4xL2DZm8ZBR3qNJ9ominL6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl
                          rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13665 (0x3561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF
        Validity
            Not Before: Jun 12 14:34:32 2026 GMT
            Not After : Jun 19 14:34:32 2026 GMT
        Subject: CN=6a2c18f8-c95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1d:0c:f8:01:80:8c:4e:3d:86:6a:29:cf:54:
                    be:85:9a:fa:32:2a:65:c6:2c:4b:44:01:dc:34:97:
                    ad:71:e8:bc:87:e3:52:c7:2b:c2:07:20:00:8c:c8:
                    7b:25:54:de:cc:98:b5:3b:69:cf:ec:29:4f:1f:cd:
                    46:fe:cf:ca:80:2b:ce:e0:5c:cb:89:4b:cc:75:28:
                    24:a1:d7:a5:ae:85:48:24:bf:77:e6:6a:98:4b:a3:
                    fd:a6:e2:04:10:48:1e:98:44:17:9f:4b:29:98:dd:
                    c0:78:30:ac:0e:02:d8:38:b5:f0:0b:75:1c:e9:06:
                    90:e3:10:dc:8c:30:a6:24:6e:57:90:6f:69:15:24:
                    dc:fc:3c:56:26:28:4c:ab:1b:ba:06:c7:13:bd:ae:
                    89:10:bb:28:10:e3:03:17:95:52:02:3b:cf:44:01:
                    ba:41:65:89:1e:4c:2b:9f:d5:b6:88:18:48:c8:11:
                    25:c4:6f:ae:52:1e:74:f5:d2:dc:3d:0b:a7:fd:85:
                    4b:42:67:ae:28:f9:b0:e9:46:2a:76:97:13:b7:fc:
                    6f:7b:9e:05:e0:c6:f6:bb:b1:22:6e:b6:e7:85:21:
                    af:90:fe:f6:c7:62:45:6a:fd:2c:74:a4:b0:b2:0d:
                    2a:99:9e:d1:07:8d:5c:68:cb:f8:c6:5b:33:8d:e2:
                    a5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7E:94:5F:92:88:C1:40:22:5E:44:84:69:D4:2E:68:8B:19:32:22
            X509v3 Authority Key Identifier:
                keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:08:9d:11:47:06:0e:45:ec:44:82:5e:47:ff:29:90:b9:14:
         77:97:f0:c0:60:e2:c3:a3:b3:88:2d:8e:25:36:cf:48:a4:d9:
         81:0f:fd:1c:6c:1b:02:d0:8e:42:0a:6b:09:6c:3a:9b:fa:40:
         eb:da:93:0b:22:7a:d4:10:a6:18:34:cb:00:fa:ec:62:9d:b5:
         f9:ca:90:5d:88:27:f6:40:46:c4:97:dc:22:a5:e6:39:29:e7:
         9c:cf:e6:88:84:c7:4a:39:31:8f:f5:bb:60:8e:46:e6:af:2f:
         af:7b:4d:a9:06:3a:9a:ea:41:7f:5a:ac:7d:74:ec:4e:ea:3e:
         80:2a:3a:3a:d3:ec:af:51:7e:c3:e4:4b:e9:99:ea:9d:c0:12:
         c3:44:d4:06:3a:d5:db:95:ef:14:08:72:81:14:7c:68:9f:e4:
         51:a6:3a:cb:ee:b9:fc:24:58:c6:1a:51:f5:37:1d:95:0e:84:
         a9:a9:52:87:f1:df:3e:14:5f:b3:3f:63:1a:b1:bd:c8:31:0f:
         3e:de:2a:c2:89:2f:f0:8b:87:6a:73:41:be:ec:10:d8:fb:49:
         d3:4e:07:d8:18:eb:01:ea:a8:8d:f8:53:7f:2e:c5:45:79:3f:
         a2:ba:07:db:8e:81:3a:8b:b9:b3:aa:8e:a2:3f:06:a7:a8:89:
         64:0e:2e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:51:37 2026 by rpki-client